RM Logo
Technical Rating: 
Support Home PageSupport
Print This PagePrint This Page
Add to 'My Library' Add to 'My Library'

RM Unify - How to 'lock out' RM Unify accounts and prevent users from logging in
Published Date : 14 Aug 2013   Last Updated : 11 Nov 2024   Content Ref: TEC3445297  





Symptoms

You may need to stop an RM Unify user from logging in - for example if they have been incorrectly matched to the wrong Microsoft® 365™ account/mailbox, or they are the subject of a disciplinary procedure, security incident etc.


Procedure

User was provisioned using AD Sync

Either:

  • Remove the user from the RM Unify Users Active Directory (AD) group to disable the account in RM Unify.
  • Disable the user's network account in AD (or in the CC4 RM Management Console ((RMMC)).
  • Change the user's password in AD (or in the CC4 RMMC).
  • As an RM Unify admin, log on to the Management Console, locate the user, click Actions and from the drop-down menu, select 'Disable* user'.

User was provisioned via CSV, MIS Sync, or manually
  • As an RM Unify admin, change the user's password in the RM Unify Management Console.
  • As an RM Unify admin, log on to the Management Console, locate the user, click Actions and from the drop-down menu, select 'Disable* user'.

Preventing access to Microsoft 365 accounts
  • Disabling a user in RM Unify or changing their password will prevent access to Microsoft 365 via the Launch Pad tiles.
  • Access to Microsoft 365 services and resources (including the Microsoft 365 desktop apps, or other mobile/device apps configured with a Microsoft 365 account) will typically be revoked within a couple of minutes. Users of the web apps will see the following message:

    'Unrecognised user' message seen by the logged-in user when their RM Unify account is disabled
    For desktop apps and other mobile/device apps, the user may see "Access is denied" messages. They may also see a prompt requesting that they sign in again with their Microsoft 365 account credentials (which will fail due to the RM Unify account being disabled).
  • To prevent a user continuing to access their Microsoft 365 account entirely, a Microsoft 365 administrator can remove selected, or all licences (Exchange Online for email, SharePoint Online for OneDrive, etc.) from that account. Please be aware that an unlicensed Microsoft 365 account will have all its data (email, OneDrive, etc.) permanently deleted after 30 days as per the default Microsoft behaviour. Unlicensing of Microsoft 365 accounts this way happens automatically when the RM Unify account is deleted.


Possible Issues

Please note that if a user is currently logged on to RM Unify and Microsoft 365, following the disabling of their account or changing their password, their current page (e.g. Launch Pad) may continue to be displayed. However, once they navigate away from that page, try to perform a restricted action, or if they log out, or their current session times out, they will receive either the "Unrecognised user" message, or if trying to log on: "Sorry but your account has been disabled. If you would like your account to be enabled, please contact your establishment's RM Unify administrator."



FEEDBACK
Did the information in this article help answer your question?
 Yes
 No
Please add any comments about this article in the box below. If you answered No then it is important you tell us why so that we can change the article if required. We can only respond if you log in to the RM Support website or provide your contact details. Note: If you need help with a technical query, please log a call online or telephone our support team.
Thank you for your feedback, which is sent directly to the RM Knowledge team. We address every message received with the intention of improving our Knowledge Library articles. If you have an unresolved technical issue, please contact RM Support.


If this article has not helped provide a solution then it is also possible to log a call...



Document Keywords: brownfield, lockout, lock, disable, matched, incorrect, security, data, protection, hijack, mistake, error, m365, TEC3445297


Please read - important disclaimer information.
http://www.rm.com/_RMVirtual/Includes/csredirect.asp?cref=&title=Standard Content Disclaimer


Top Of PageTop of page